Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/CK52T6p0E7ESwnqDqSVY8lL8_70.roa
File: CK52T6p0E7ESwnqDqSVY8lL8_70.roa (raw, json)
Hash identifier: m2IIs3Gwd4m4+h38MEOI4HzrrXRLxiNMmWMZHNUvcXY=
Subject key identifier: 08:AE:76:4F:AA:74:13:B1:12:C2:7A:83:A9:25:58:F2:52:FC:FF:BD
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018C34FEFB2F2B59DE1A01D45798DC05A69E
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/CK52T6p0E7ESwnqDqSVY8lL8_70.roa
Signing time: Mon 04 Dec 2023 13:22:54 +0000
ROA not before: Mon 04 Dec 2023 13:22:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39543
IP address blocks: 195.28.2.0/23 maxlen: 23
193.19.192.0/22 maxlen: 22
193.19.192.0/24 maxlen: 24
193.19.193.0/24 maxlen: 24
193.19.195.0/24 maxlen: 24
193.19.194.0/24 maxlen: 24
93.113.204.0/24 maxlen: 24
93.114.79.0/24 maxlen: 24
89.40.67.0/24 maxlen: 24
89.47.96.0/24 maxlen: 24
89.47.96.0/20 maxlen: 20
89.47.97.0/24 maxlen: 24
89.47.98.0/24 maxlen: 24
89.47.99.0/24 maxlen: 24
89.47.101.0/24 maxlen: 24
93.114.194.0/24 maxlen: 24
89.47.100.0/24 maxlen: 24
89.47.103.0/24 maxlen: 24
89.47.102.0/24 maxlen: 24
89.47.104.0/24 maxlen: 24
89.47.105.0/24 maxlen: 24
89.35.158.0/24 maxlen: 24
89.47.106.0/24 maxlen: 24
89.47.108.0/24 maxlen: 24
89.47.107.0/24 maxlen: 24
89.47.110.0/24 maxlen: 24
89.47.109.0/24 maxlen: 24
89.47.111.0/24 maxlen: 24
89.47.115.0/24 maxlen: 24
89.47.114.0/24 maxlen: 24
89.47.118.0/24 maxlen: 24
89.47.122.0/24 maxlen: 24
89.47.120.0/24 maxlen: 24
89.47.119.0/24 maxlen: 24
89.38.228.0/24 maxlen: 24
89.38.229.0/24 maxlen: 24
89.45.164.0/24 maxlen: 24
89.39.111.0/24 maxlen: 24
89.34.27.0/24 maxlen: 24
2001:4d18::/32 maxlen: 32
2001:4d18::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:34:fe:fb:2f:2b:59:de:1a:01:d4:57:98:dc:05:a6:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Dec 4 13:22:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=08ae764faa7413b112c27a83a92558f252fcffbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d2:8d:a4:28:26:99:75:09:25:20:55:af:67:
d8:06:a0:1a:67:51:34:54:e9:a5:b5:8a:32:0c:35:
f1:11:0b:d6:b4:bf:cc:79:94:63:8a:56:2b:29:ef:
05:2a:d7:55:bf:5f:76:e8:10:8c:fc:86:0d:46:b6:
65:87:16:cb:26:35:bd:39:e2:67:59:c5:ce:59:b6:
8c:9d:83:65:17:b0:85:11:00:f7:2d:ee:5b:fc:75:
35:31:56:f4:f6:e6:66:7e:ea:1c:a8:e3:69:b9:ce:
c5:85:26:f3:4c:7a:8f:cc:e1:ea:d3:bb:69:38:a1:
18:6c:c8:ae:49:4f:0e:e5:6e:74:fa:07:af:f1:ff:
fa:1b:78:14:9a:68:92:c7:9c:ce:7c:58:bf:61:3c:
b5:14:5b:46:19:32:2e:0c:f0:5c:a3:19:8c:b3:9b:
7f:3d:1f:f2:a0:6b:a6:0f:29:81:d1:e4:c3:b6:95:
61:0d:fe:9d:74:b5:24:d7:94:53:54:64:3c:d5:ca:
a3:a2:f6:b3:7d:14:2e:a7:87:c9:2e:1e:4f:fa:4c:
7a:db:81:0e:38:fa:a2:22:8b:27:57:16:74:54:f2:
5e:91:3e:d2:37:dc:71:96:19:be:58:e6:a5:dc:fb:
8a:e5:93:ad:5f:07:6e:e8:ab:ef:61:d1:f6:1e:03:
17:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:AE:76:4F:AA:74:13:B1:12:C2:7A:83:A9:25:58:F2:52:FC:FF:BD
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/CK52T6p0E7ESwnqDqSVY8lL8_70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.27.0/24
89.35.158.0/24
89.38.228.0/23
89.39.111.0/24
89.40.67.0/24
89.45.164.0/24
89.47.96.0/20
89.47.114.0/23
89.47.118.0-89.47.120.255
89.47.122.0/24
93.113.204.0/24
93.114.79.0/24
93.114.194.0/24
193.19.192.0/22
195.28.2.0/23
IPv6:
2001:4d18::/32
Signature Algorithm: sha256WithRSAEncryption
1a:fc:ec:5b:fd:d3:2c:16:fe:44:4b:34:2a:e4:2d:37:43:f0:
68:2a:b7:6b:0d:47:3a:10:b9:c7:db:13:d6:08:c1:55:59:82:
dd:62:c7:f8:c7:5b:69:16:ce:05:99:50:6a:e5:6d:7b:5f:2d:
d3:b7:0b:76:0e:1e:84:48:d4:26:32:43:8b:8e:ea:11:6b:be:
30:32:92:7b:18:a7:f0:18:45:90:13:aa:97:a3:6d:c4:5b:0e:
dc:07:aa:14:25:ce:41:1b:ed:27:2a:a7:88:44:20:e7:51:f9:
3b:f9:bf:1b:49:06:a8:76:08:67:62:79:79:7e:f4:f3:5c:b2:
75:b0:3f:87:c9:4a:a3:f4:22:48:6a:a4:0e:89:3c:e8:d6:42:
95:55:b2:5e:5e:50:ff:36:9e:7b:d1:d3:ae:c0:7a:a8:5d:33:
ca:f2:ec:a9:ce:9f:91:c1:fe:0c:43:43:6a:2e:96:45:e4:46:
ec:b4:3c:6d:21:02:09:b8:86:c0:41:2b:b6:ff:53:97:c7:3a:
da:db:ff:a9:4a:69:77:de:13:20:64:bd:0e:fb:17:78:96:8d:
9f:9c:e2:a9:fb:b9:3f:fb:39:36:95:22:cf:de:a5:45:27:17:
aa:dd:87:d0:38:eb:00:e2:da:09:8c:9e:94:e5:d2:99:68:4c:
0f:3e:0d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:18 2024 by rpki-client on console-fra.rpki-client.org